Novo Insurance, LLC, along with its affiliates and subsidiaries (collectively referred to as 'Novo', 'Novo Insurance,' 'Company,' 'we,' or 'us'), is a wholly owned subsidiary of Telenav, Inc. ('Telenav'). We own, operate, and manage the website www.novo.us ("website"), including any related parent or child sites (the 'Site'), as well as the Novo Insurance mobile application (the 'Mobile Application'). Together, these are referred to as the 'Novo Insurance Platform.'
This Cookie Policy shall apply to all users of this website. The following information is intended to inform users of this website about the placement, use, and management of cookies in the context of browsing our website.

We use the term "cookies" to refer to cookies and/or similar technologies through which information can be collected automatically.

Cookies are used to provide users of this website with a better browsing experience and services tailored to the needs and interests of individual users, namely for:

• improving the usability of the website, including identifying any errors that occur while users are visiting/using it.

• providing anonymous statistics on how the website is used to us, as the owner of this website.

• anticipating possible future services or products that may be offered to users based on the services/products being accessed.

• tracking user activity across the novo insurance platform to improve user experience and personalize content.

• conducting research and analysis to better understand user behavior and preferences.

• supporting marketing efforts by delivering tailored advertisements and promotional content based on user interactions with the website and mobile application.

Cookies provide Novo Insurance with valuable feedback on how this website is used so that measures can be taken to improve the efficiency and accessibility of this website for its users. Sometimes, the use of cookies also allows the storage of specific settings / preferences set by the users of this website, such as, the language in which a web page is viewed.

An "Internet Cookie" (also known as a "browser cookie," or "HTTP cookie," or "cookie") is a small file of letters and numbers that will be stored on a user's computer, mobile device, or other equipment through which the internet or a specific webpage is accessed.

Cookies are installed by request from a web server to a browser (e.g., Internet Explorer, Firefox, Chrome, Safari). Once installed, cookies have a fixed lifetime and remain "passive" in the sense that they do not contain software, viruses, or spyware and will not access information on the hard drive of the user on whose equipment they are installed. Most cookie consists of two parts: (i) the name and (ii) the content or value of the cookie. Technically, only the webserver that sent the cookie can re-access it when a user returns to the web page associated with that webserver.

There are the following categories of cookies:

• Session Cookies - A "session cookie" is a cookie that is automatically deleted when the user closes their browser.

• Persistent Cookies - A "persistent cookie" is a cookie that remains stored on the user's terminal until it reaches a certain expiration date (which may be minutes, days, or years in the future).

Cookies are managed and controlled by web servers, with their lifespan varying significantly based on their intended purpose and functionality. Some cookies, known as session cookies, are temporary and remain active only for the duration of a user's visit to the website. These cookies are automatically deleted once the browsing session ends or the user navigates away from the site. In contrast, persistent cookies are designed to be retained for longer, enabling the website to recognize returning users and recall preferences across multiple visits. The duration for which persistent cookies remain stored on a user's device depends on the specific settings established by the web server or third-party provider that issues them.

Despite their designated lifespans, users retain full control over cookie storage and may delete or manage them at any time through their browser settings. It is important to note that modifying or turning off certain cookies may impact the performance and functionality of the website. For comprehensive details regarding the retention and management of cookies deployed by third-party providers or specific technologies used within our website, users are encouraged to refer to the policies and documentation available on each provider's official website.

Cookies can generally be installed directly by the Controller of the accessed website's, so called "own cookies" or by other websites' "third-party cookies" or "third-party tracking technologies."
Novo may utilize third-party cookies as part of our website functionality and for different purposes as (i) analytics and statistics, (ii) targeted advertising/marketing, and (iii) website personalization. In such instances, we ensure that you are fully and transparently informed about their presence through our cookie banner. You also have the option to decline the use of such cookies at any time, should you choose not to accept them.

Our website only uses credible third-party cookies, and we do not allow any third party to use these cookies other than for the purposes listed in this Policy. When working with third-party companies, we take steps to protect your data. For example, we place contractual limits on how data collected about people using our services is used, and we regularly audit our sites to ensure only authorized cookies are used.

Kindly note that we cannot influence or control third-party cookies that are already on your computer at the time of visiting our website, nor do we have the ability to know what information such cookies collect.

By using/visiting our website, cookies may be placed for the following purposes:

• Strictly-necessary and experience-enhancing Cookies;

• Cookies used for targeted advertising/marketing purposes;

A. Strictly necessary and experience-enhancing cookies:

These cookies play a crucial role in ensuring the website functions smoothly, securely, and efficiently while also enhancing the user experience. They enable core website operations by supporting necessary functionalities such as secure logins, accessibility features, fraud prevention, and system stability. Without these cookies, certain essential services and features may not be available or may not perform optimally.

In addition to supporting fundamental functionality, these cookies help tailor the website to individual preferences by remembering settings such as language selection, display configurations, and other personalized elements. This allows for a more seamless and intuitive browsing experience, ensuring that users can navigate and interact with the website in a way that best suits their needs.
Furthermore, these cookies contribute to the continuous improvement of the website by gathering insights on user interactions. They help identify patterns, optimize performance, and refine content to enhance usability and engagement. By allowing these cookies, users benefit from a secure, stable, and customized digital experience while also enabling the website to evolve and adapt to their needs.

Our necessary and experience-enhancing cookies are provided by:

• NextAuth.js Cookies: Our website utilizes authentication cookies set by NextAuth.js, an authentication framework for Next.js applications, to ensure secure and seamless user sign-ins. The next-auth.callback-url cookie temporarily stores the URL to which a user should be redirected after logging in, ensuring a smooth and uninterrupted navigation experience. Meanwhile, the next-auth.csrf-token cookie provides protection against Cross-Site Request Forgery (CSRF) attacks by verifying the legitimacy of authentication requests, enhancing security measures. These cookies are essential for maintaining a secure authentication process while improving user convenience.

• Osano (osano_consentmanager and osano_consentmanager_uuid) both having a 1 (one) year lifetime and are used strictly to collect and store the user's consent granted via the cookie banner concerning the use of cookies;

• Google Analytics cookies help improve website functionality and user experience by providing insights into how visitors interact with the site. These cookies enable the optimization of navigation, content, and overall performance while ensuring a seamless and efficient browsing experience. For example, _ga assigns a unique identifier to recognize returning visitors and enhance continuity, while _gid helps analyze interactions within a session to refine usability. _gat manages data flow to ensure the website remains responsive, and _utmz identifies sources of engagement to improve accessibility and content relevance.
  

  The data collected through Google Analytics might be retained for a period of up to 24 months, unless otherwise modified in accordance with Google's data retention policies. This period ensures adequate time for performance evaluation and website optimization while maintaining compliance with applicable privacy laws. For further details regarding Google Analytics' data retention practices, please refer to their official retention documentation.

• OpenReplay employs cookies to enhance website functionality and user experience by capturing anonymized data on user interactions. This information allows for the replay of user sessions, providing insights into navigation patterns and identifying areas for improvement. For instance, OpenReplay's session replay feature records user activities to help developers understand user behavior and troubleshoot issues effectively. Additionally, performance monitoring tools within OpenReplay collect data on page load times and resource usage, enabling the optimization of website performance. The session replay and performance monitoring data collected through OpenReplay technologies integrated within our website are retained for a period of up to 14 days, unless otherwise specified in OpenReplay's configuration settings. For additional information regarding OpenReplay's data retention policies, please consult their official retention documentation.

B. Targeted Advertising/Marketing cookies:

We may use cookies, as well as other technologies, to track various aspects of your interaction with online advertisements, including the type of advertisement viewed, the time elapsed since it was seen, and more. These technologies help provide a more personalized browsing experience and may involve tracking and targeting for advertising purposes. The information collected is typically anonymous and relates to the content viewed, rather than personal details about the user.

By assessing ad performance, these technologies assist us in refining and improving our marketing strategies. Advertising networks typically deploy these technologies with the website operator's consent, supporting targeted advertising efforts tailored to your interests.

Our Targeted Advertising/Marketing technologies used are provided by:

• El Toro - IP Targeting Technology (Cookieless Advertising). This technology provided by El Toro allows us to target ads based on IP addresses rather than relying on traditional cookies. This enables us to deliver highly targeted ads to the relevant devices, with a precision that can reach down to one square meter. This cookieless solution provides more accurate targeting without tracking users through browser cookies.
  
  

  El Toro's technology does not store personally identifiable information (PII), nor does it rely on cookies to track users. The data used for matching IP addresses with mailing addresses is temporary and used solely for the purpose of delivering and measuring the effectiveness of our advertising campaigns. Once the campaign is concluded, the data is no longer retained.

  If you prefer not to participate in this type of targeted advertising, you can opt out at any time by visiting El Toro's opt-out page here. Opting out will prevent further ads from being served to you based on your physical address or IP address, while allowing you to continue using our website without restriction.

• Google Tag Manager Pixel (Script Advertising). Novo will also use the Google Tag Manager Pixel as part of our targeted advertising efforts. This Pixel helps us track user interactions with the site and deliver targeted advertisements to users based on their online behavior so we can monitor how users engage with various content, products, or services. Google Tag Pixel only collects informations about your interactions, such as pages viewed, time spent on the site, and specific actions taken, such as clicks or form submissions. Google Pixel does not collect (PII) directly. The information gathered is anonymous and pertains primarily to your behavior and interaction with the website. This data allows us to tailor and optimize the advertising you see, based on your browsing patterns and interests. Typically, the pixel will collect data for a period of up to 180 days. After the specified period, the data is automatically deleted and no longer used for targeting or advertising purposes.
  
  

  If you prefer not to be targeted by personalized ads using the Google Tag Manager Pixel, you can opt out anytime by visiting the Google Ads Settings page or by customising the preferences directly within our cookie banner. You may also disable cookies or use browser extensions to block tracking technologies.

• Meta & Yahoo Advertising. Our website uses Meta Pixel (_fbp) and Yahoo (A3) cookies to enhance ad relevance, measure campaign effectiveness, and personalize user experiences. The _fbp cookie, with a 90-day lifespan, helps Meta track website users and deliver targeted ads across its platforms, including Instagram and Messenger, based on user interactions. Such technologies helps Novo create custom audiences and retarget users with more personalized ads. Where user consent permits, to improve the precision and reliability of these technologies, we may enhance Meta Pixel functionality through the use of the Meta Conversions API, incorporating additional pseudonymized user attributes to support more accurate event matching and performance measurement. Similarly, the A3 cookie, which lasts 13 months, enables Yahoo to optimize ad targeting and track campaign performance across its network.
  
  

  These cookies ensure a more relevant and personalized browsing experience while complying with data protection regulations. For more details, refer to the Facebook Cookie Policy and Yahoo Cookie Policy.

• Reddit Cookie: Our website may use the (__r_b_s) cookie, set by Reddit, to analyze user interactions and engagement patterns. This cookie helps improve user experience by providing insights into how visitors navigate and interact with content on Reddit's platform. While the specific retention period for this cookie is not explicitly documented, it is used to enhance functionality and ensure a seamless experience. For more details on how Reddit handles cookies and user data, please refer to their Privacy Policy.

Under the data protection laws of Virginia ("Virginia Consumer Data Protection Act – VCDPA"), Utah ("Utah Consumer Privacy Act – UCPA"), Colorado ("Colorado Privacy Act – CPA"), California ("California Consumer Privacy Act - CCPA, as amended by the California Privacy Rights Act – CPRA"), and Connecticut ("Connecticut Data Privacy Act – CTDPA"), consumers have the right to opt out of the sale of their personal data. This right allows individuals to prevent the transfer of their personal information to third parties for monetary or other valuable consideration.

As a consumer covered by these laws, you may exercise your "Do Not Sell My Personal Data" right at any time. When making this request, you will be directed to a Preference Center, where you will have the ability to manage your data-sharing preferences, including enabling or disabling the sale or sharing of your personal data. This Preference Center will allow you to customize your privacy settings and make informed choices regarding the use of your data. Once submitted, the request will be processed in compliance with applicable legal requirements. No discrimination, denial of service, or differential treatment will result from the exercise of this right.

For further details or to manage your preferences, please visit our Preference Center, where you can review and adjust your privacy settings at any time.

We may share certain categories of anonymized/pseudonymized data, such as encrypted email addresses or phone numbers, with third-party partners strictly for purposes related to the deployment, enhancement, and performance optimization of cookies, pixels, and similar tracking technologies. This may include the enrichment of our tracking tools to improve ad measurement, targeting accuracy, and website functionality, but only where users have already provided their consent for targeted and advertising cookies and have not opted out of data sharing under our 'Do Not Sell' option. All such data is processed in compliance with applicable U.S. privacy laws, using techniques that prevent direct identification of the data subject, and is never shared for unrelated commercial gain or beyond the scope presented herein.

To ensure the proper operation of our website, we may collaborate with trusted service providers and technology partners who assist in hosting, security, and tracking or advertising. These partners may process among others limited data necessary to support critical functionalities, including safeguarding against unauthorized access, managing content distribution efficiently, and optimizing website responsiveness. Performance monitoring and analytics tools also play an essential role in understanding website functionality, user tracking and user interactions, allowing us to refine navigation, detect technical issues, and improve the overall experience. For instance, Google Analytics helps assess visitor engagement trends, while OpenReplay provides insights into session interactions for usability improvements. These tools process anonymized and aggregated data to enhance site performance without identifying individual users.

Certain third-party tools contribute to personalization by remembering user preferences, such as language settings and interface configurations, ensuring a seamless browsing experience. Additionally, our website might integrate consent management platforms that store and process user privacy preferences, ensuring compliance with data protection regulations.

In specific cases, we may also disclose data when required by law, regulatory obligations, or legal proceedings. This may include cooperating with law enforcement authorities, government agencies, or regulatory bodies in response to lawful requests. Furthermore, in the event of a business transfer, such as a merger or acquisition, data may be shared with the acquiring entity solely for continuity of service, ensuring that privacy rights and data protection measures remain in place.

All data shared with third-party partners is subject to strict contractual obligations that prohibit its use for purposes beyond those explicitly stated in our agreements. These partners are required to adhere to robust security and data protection standards, and any data processed is limited to the minimum necessary for its intended function.

Users retain the right to manage their data preferences and have full discretion to adjust their cookie and privacy settings at any time through our Preference Center. By default, all cookies are activated to ensure the optimal functionality and performance of the website; however, users may exercise their rights under applicable privacy laws to disable or modify these settings in accordance with their preferences, ensuring transparency and compliance with regulatory requirements.

Novo may use or implement plug-ins of third-party social networks. In general, your interaction with a plug-in allows the third party to collect information about you, including your IP address, page header, and browser information. Novo has implemented the following social buttons:

• Facebook - (https://www.facebook.com/privacy)

• Instagram - (https://privacycenter.instagram.com/policy)

• X - (https://x.com/en/privacy)

• LinkedIn - (https://www.linkedin.com/legal/privacy-policy)

Cookies store information in a small text file that allows browser recognition. This website recognizes the browser until the cookies expire or are deleted.

If the use of cookies is not intrusive and the computer or technical equipment used to browse this website is only used by you, long expiry periods may be used to store your browsing history.

If more than one person uses the computer or technical equipment used for browsing this website, you may consider setting it to delete individual browsing data each time the browser is closed.

10.1 How can cookies be turned off?

Disabling and refusing to receive cookies may make this website difficult to visit and may limit your ability to use it. Users can configure their browser to reject or accept cookies from a specific website.

All modern browsers offer the possibility to change cookie settings. These settings can usually be accessed in your browser's "options" or "preferences" menu.

Users also have the possibility to disable cookies (except those strictly necessary for the functioning of this website) via the cookies banner: (i) by accessing the "Configure cookies" option included in the banner signaling the use of cookies, displayed when you first access the website; (ii) by accessing the "Set Cookies" option at the bottom of the webpage.

To understand these settings, the following links may be useful:

• Cookie settings in Microsoft Edge

• Cookie settings in Firefox

• Cookie settings in Chrome

• Cookie settings in Safari

The compliance monitoring with legal requirements in this area is also ensured by the Data Protection Officer designated within Novo, having the following contact details: privacy@novo.us.

All information regarding the use of cookies and similar tracking technologies is an integral part of our broader data processing practices and shall be interpreted in conjunction with our General Privacy Policy, which provides comprehensive details on how personal data is collected, processed, stored, and protected. For a full understanding of your rights, the scope of data processing, and additional provisions governing the handling of personal information, please refer to our General Privacy Policy, available at https://www.novo.us/privacy-pledge.

We reserve the right to change the Cookie Policy at any time. Any changes will be published on our dedicated page on https://www.novo.us and will be effective as of the publication date. We will post the most current version of the Policy to our website at https://www.novo.us.